Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: zf07zcihA5in64zpfAOPU3U2mV6vy7GDPkx3FgBs1DY=
Subject key identifier: FF:A8:2F:23:F4:DC:1D:99:7C:E9:DC:07:7F:3B:07:F2:81:D9:68:A7
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 0199FB45BBA68937318DFD9C2DD1F539B5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0F73
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: W+zaC7uCrmaNJJZ6hiiY4OkVtqaw5V5D0nIDDSTEGxY=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bb:a6:89:37:31:8d:fd:9c:2d:d1:f5:39:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=ffa82f23f4dc1d997ce9dc077f3b07f281d968a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:db:a4:b4:3c:29:2f:88:b7:06:39:36:b8:
73:53:32:91:eb:ca:9b:dc:2b:e1:0f:70:60:3f:58:
80:5b:7b:ce:a3:ac:aa:b4:da:58:ee:7d:05:4a:26:
99:76:fb:27:7c:e0:02:62:96:35:aa:ea:26:8f:17:
87:30:3b:0e:3b:90:98:31:d2:36:cb:42:6f:20:3f:
cc:9e:eb:ab:36:fd:8d:d7:17:d3:2a:6f:bc:c6:6b:
12:36:a5:b5:aa:6c:98:6f:d6:d0:e8:82:c2:35:e5:
91:9d:cc:0f:a0:8f:7d:63:b9:eb:b7:05:2a:27:88:
d4:4d:52:2b:8b:e3:47:01:ea:73:eb:0c:d7:22:8a:
a5:fa:0d:13:92:c3:f3:df:06:34:d9:bb:14:a3:bb:
56:12:53:9e:66:d8:95:99:ba:fe:97:26:3d:6b:0c:
1c:cc:a8:68:f6:9c:a4:2b:a4:40:4c:df:bc:8b:70:
ac:f1:00:56:b4:0e:ea:5d:87:a7:8a:d3:5e:ad:da:
a2:c4:0e:f6:79:5a:84:a1:d7:6c:5d:15:e2:79:94:
86:81:68:dc:56:5b:2f:29:0e:8c:51:ec:12:95:ff:
4d:27:59:14:f3:18:bb:e2:76:17:6d:67:d5:02:f6:
83:89:5f:48:3d:e3:a6:ea:3e:6a:79:b4:45:39:6a:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:2F:23:F4:DC:1D:99:7C:E9:DC:07:7F:3B:07:F2:81:D9:68:A7
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:47:88:a6:59:d4:92:1f:26:f3:a7:5a:85:51:a5:9d:87:36:
be:be:0b:f7:60:c1:22:d0:bc:20:45:78:76:df:25:f4:d5:2b:
a9:31:79:40:76:76:2a:e1:3a:be:cc:11:b8:e0:99:22:af:be:
df:91:29:45:b5:f9:7c:29:c7:31:96:48:2e:cf:1c:9f:4b:c9:
59:c7:7e:b3:dd:5b:17:ae:76:f3:20:c7:57:52:ec:69:7b:ae:
45:62:e4:6c:08:8e:d8:ba:c7:01:f4:54:7e:79:77:15:fb:ed:
71:75:ec:1c:c6:fc:ac:d1:81:7a:ea:e3:87:98:8e:c0:67:14:
2f:96:34:2a:64:c6:58:a6:ce:c0:8d:fe:07:b1:ac:55:f2:76:
1f:67:4d:8a:e0:2a:68:79:1e:f3:d3:bf:11:1d:52:b9:75:76:
86:77:59:a1:76:62:15:d4:da:55:8d:43:8a:a4:37:05:34:ff:
47:b0:12:40:b8:b1:ab:97:61:a7:b3:c1:62:74:8a:d7:7e:fe:
ef:a0:69:16:a3:3e:ae:61:61:eb:bd:92:2d:b5:d5:18:dc:65:
1c:f3:bc:92:fa:da:10:6c:1b:b3:27:b8:78:0d:2c:ea:18:23:
69:c2:df:ee:8c:42:85:c4:9f:ba:ea:d6:1d:38:d8:01:10:52:
ad:ff:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:04 2025 by rpki-client